Hackers release new browser-based iOS 'jailbreak' based on PDF exploit

13

Comments

  • Reply 41 of 73
    loydbloydb Posts: 4member
    Because not everyone who jailbreaks is a pirate



    MyWi, MyWi and MyWi. That's really all I have installed.
     0Likes 0Dislikes 0Informatives
  • Reply 42 of 73
    apple ][apple ][ Posts: 9,233member
    Quote:
    Originally Posted by hill60 View Post


    Why buy from Cydia when your jailbroken iphone has access to pirated versions of everything anyway?



    (there are millions of users of Cydia, but only ~5% of them make purchases from the storefront).





    http://www.macnotes.net/2010/03/30/c...k-jay-freeman/
     0Likes 0Dislikes 0Informatives
  • Reply 43 of 73
    macslutmacslut Posts: 514member
    Quote:
    Originally Posted by hill60 View Post


    Why buy from Cydia when your jailbroken iphone has access to pirated versions of everything anyway?



    Because we don't want to pirate, and there are paid apps in Cydia. There are a lot of useful free apps in Cydia as well.



    What people seem to be forgetting is that you don't need to jailbreak in order to pirate. You can do so with the SDK.



    Sure, some number of jailbreakers are pirates, but since yo don't need to jailbreak in order to pirate obviously people, like me, see other benefits to jailbreaking.
     0Likes 0Dislikes 0Informatives
  • Reply 44 of 73
    mstonemstone Posts: 11,510member
    Quote:
    Originally Posted by cloudgazer View Post


    The significance here isn't that it's a jailbreak - it's that it's a web based rootkit. ie. this is a huge gaping hole in the iPhone's security model - and once again comes curtesy of the PDF reader.



    The curse of Adobe strikes again!



    Sorry no, this is all Apple. PDF is an open format to read and write. How you implement that is up to your programmers. The hackers create a bogus PDF file and if Apple's programmers allow that file to overflow a buffer, it is not Adobe's fault,
     0Likes 0Dislikes 0Informatives
  • Reply 45 of 73
    gatorguygatorguy Posts: 24,765member
    On on a related note, Microsoft is double-daring the hacker community to attempt a DDoS attack on their servers. Says it can't be done. . .



    http://www.networkworld.com/communit..._pm_2011-07-06
     0Likes 0Dislikes 0Informatives
  • Reply 46 of 73
    macrrmacrr Posts: 488member
    Quote:
    Originally Posted by Prof. Peabody View Post


    Indeed. The reaction to this news on most sites I've seen this morning is either a yawn, or a "why would anyone jailbreak anymore?"



    If jailbreaking isn't already on the wane, the rise of WebApps next year and the year after will put the last nail in the coffin. It will actually be better because it will go back to being something that a techie does for laughs instead of a mock business run by 17 year old asshats.



    Ad hominem attack deleted - JL



    Adhominem aside- I still was right. -MRR
     0Likes 0Dislikes 0Informatives
  • Reply 47 of 73
    nvidia2008nvidia2008 Posts: 9,262member
    Ah, AppleInsider today... I come for the news, but stay for the insults.
     0Likes 0Dislikes 0Informatives
  • Reply 48 of 73
    aaarrrggghaaarrrgggh Posts: 1,609member
    Quote:
    Originally Posted by Apple ][ View Post


    (there are millions of users of Cydia, but only ~5% of them make purchases from the storefront).





    http://www.macnotes.net/2010/03/30/c...k-jay-freeman/



    Personally, I am loathe to give my credit card info to a site with more relaxed internal controls than Apple. Look at the Sony attacks for starters. I am also a little nervous about the security risks of jailbreaking.



    That said, I travel enough internationally that an unlocked phone is a must. Buying unlocked but still paying the same rates for a subsidized device is almost as criminal as the roaming rates the telcos charge.
     0Likes 0Dislikes 0Informatives
  • Reply 49 of 73
    gwydiongwydion Posts: 1,101member
    Quote:
    Originally Posted by cloudgazer View Post


    The significance here isn't that it's a jailbreak - it's that it's a web based rootkit. ie. this is a huge gaping hole in the iPhone's security model - and once again comes curtesy of the PDF reader.



    The curse of Adobe strikes again!



    Quote:
    Originally Posted by Splash-reverse View Post


    What? Adobe security exploit again? What are they doing in there? PDF shouldn't have been this insecure.



    And the one to blame is Adobe because....





    Ah, yes, because the program exploited is a program developed by Adobe, using libraries done by Adobe, used in a device designed and built by Adobe.



    Righy?
     0Likes 0Dislikes 0Informatives
  • Reply 50 of 73
    wbiiwbii Posts: 1member
    Quote:
    Originally Posted by Gwydion View Post


    And the one to blame is Adobe because....





    Ah, yes, because the program exploited is a program developed by Adobe, using libraries done by Adobe, used in a device designed and built by Adobe.



    Righy?



    If that's true, Jobs must be very noisy now.
     0Likes 0Dislikes 0Informatives
  • Reply 51 of 73
    nvidia2008nvidia2008 Posts: 9,262member
    This is actually some pretty impressive work by comex and others. It's a userland jailbreak (ie. much less complicated) that covers so many devices including the previously impervious iPad 2.



    Technically, I think the jailbreak community keeps Apple on its toes.



    Apple locked down the iPad 2 pretty hard following all the previous jailbreak exploits.



    By releasing this jailbreak now along with the patch, they've pretty much ensured Apple will close the hole as iOS 5 is released and make the iPad 2 even more secure.



    Piracy is unfortunate, I buy all my apps including LockInfo and DisplayOut from Cydia, even though, yes, the cracked versions of Cydia apps are also available.



    Hackers gonna hack, pirates gonna pirate.



    With iOS 5 closing this jailbreak and having the features you had to jailbreak to get, iOS will only get better and will encourage more legitimate purchasing of apps.



    Also, with Apple finally selling a fully unlocked iPhone 4 in the US, and increasing this avenue around the world, the need to jailbreak to carrier unlock will be diminished.



    With my iPad 2 right now having full mirroring, I can't think of any need to jailbreak it. As for my iPhone 4, LockInfo and DisplayOut is still important, as is of course the essential SBSettings. Once you use SBSettings it is hard to go back. It's very convenient.
     0Likes 0Dislikes 0Informatives
  • Reply 52 of 73
    cloudgazercloudgazer Posts: 2,161member
    Quote:
    Originally Posted by Gwydion View Post


    Ah, yes, because the program exploited is a program developed by Adobe, using libraries done by Adobe, used in a device designed and built by Adobe.



    A program reading a document in a format defined by Adobe, a format which has a long history of security problems across multiple platforms and multiple readers



    http://en.wikipedia.org/wiki/PDF#Viruses_and_exploits



    Sometimes I wonder if the acronym really stands for Payload Deployment Format.
     0Likes 0Dislikes 0Informatives
  • Reply 53 of 73
    toysandmetoysandme Posts: 243member
    Quote:
    Originally Posted by gwlaw99 View Post


    People who are appalled at jailbreakers are the same people who 3 months ago said that iPhone notifications were fine and that adding any information on the lock screen would make the iPhone into a horrible mess that only geeks (read: closet android fans) would want. People jailbreak because they want the features that jailbreaking provides.



    Although there is less of a need now for JB, I would do it in a minute if I could get an important feature that has been available on many dumbphones for years: the ability to record both sides of a conversation. Several European countries will make this compulsory for business transactions soon, e.g.:



    "In November, Britain?s Financial Services Authority (FSA) will roll out legislation requiring all financial services companies to record their mobile phone and text correspondence. Similar legislation has been enacted across other European states, most recently in Norway, under the umbrella of the EU Markets in Financial Instruments Directive (MiFID)."



    See: http://www.growingbusiness.co.uk/com...nvestment.html
     0Likes 0Dislikes 0Informatives
  • Reply 54 of 73
    gwydiongwydion Posts: 1,101member
    Quote:
    Originally Posted by cloudgazer View Post


    A program reading a document in a format defined by Adobe, a format which has a long history of security problems across multiple platforms and multiple readers



    http://en.wikipedia.org/wiki/PDF#Viruses_and_exploits



    Sometimes I wonder if the acronym really stands for Payload Deployment Format.



    Blaming Adobe for the vulnerability of Reader App on iOS is like blaming W3C for a vulnerability on Safari Browser
     0Likes 0Dislikes 0Informatives
  • Reply 55 of 73
    s4mb4s4mb4 Posts: 267member
    Quote:
    Originally Posted by LogicNReason View Post


    Whenever I see people who can't appreciate the importance of work that people do FOR OTHERS it just makes me feel better about myself.







    you actually think Jay Freeman and company have not made tens of thousands of dollars ensuring cydia is always available, you are crazy.
     0Likes 0Dislikes 0Informatives
  • Reply 56 of 73
    macrulezmacrulez Posts: 2,455member
    deleted
     0Likes 0Dislikes 0Informatives
  • Reply 57 of 73
    macrulezmacrulez Posts: 2,455member
    deleted
     0Likes 0Dislikes 0Informatives
  • Reply 58 of 73
    wovelwovel Posts: 956member
    Quote:
    Originally Posted by gwlaw99 View Post


    People who are appalled at jailbreakers are the same people who 3 months ago said that iPhone notifications were fine and that adding any information on the lock screen would make the iPhone into a horrible mess that only geeks (read: closet android fans) would want. People jailbreak because they want the features that jailbreaking provides.



    Can you link even one post within the past two years where someone said the notification system is fine. Even the biggest iPhone fans have been fairly universal in their dislike of the current notification system...
     0Likes 0Dislikes 0Informatives
  • Reply 59 of 73
    wovelwovel Posts: 956member
    Quote:
    Originally Posted by nvidia2008 View Post


    This is actually some pretty impressive work by comex and others. It's a userland jailbreak (ie. much less complicated) that covers so many devices including the previously impervious iPad 2.



    Technically, I think the jailbreak community keeps Apple on its toes.



    Apple locked down the iPad 2 pretty hard following all the previous jailbreak exploits.



    By releasing this jailbreak now along with the patch, they've pretty much ensured Apple will close the hole as iOS 5 is released and make the iPad 2 even more secure.



    Piracy is unfortunate, I buy all my apps including LockInfo and DisplayOut from Cydia, even though, yes, the cracked versions of Cydia apps are also available.



    Hackers gonna hack, pirates gonna pirate.



    With iOS 5 closing this jailbreak and having the features you had to jailbreak to get, iOS will only get better and will encourage more legitimate purchasing of apps.



    Also, with Apple finally selling a fully unlocked iPhone 4 in the US, and increasing this avenue around the world, the need to jailbreak to carrier unlock will be diminished.



    With my iPad 2 right now having full mirroring, I can't think of any need to jailbreak it. As for my iPhone 4, LockInfo and DisplayOut is still important, as is of course the essential SBSettings. Once you use SBSettings it is hard to go back. It's very convenient.



    Does not work on my 4.33 3GS, will not even try on my iPad. I just wanted to see if it actually works. Did any of the sites promoting/discussing this even bother to try it and test their claims...
     0Likes 0Dislikes 0Informatives
  • Reply 60 of 73
    So, what - slow news day today?



    Seriously, there is nothing wrong with jailbreaking - I don't do it on my regular devices because I need their reliability and security for my work (SOX, etc requirements) and company policy expressly disallows jailbroken devices.



    But you who decry jailbreaking are silly buggers who could well be accused of unctuous self-righteousness in the extreme. And worse those jailbreakers on here who are busy writing scathing responses look even sillier!



    Obviously jailbreaking has its uses, and its a lot more secure and easier to do than before. If the jailbreaking community would spend less time opining about their David and Goliath relationship to Apple ( the scale is all wrong, but its the best example) and just enjoy the vissitudes of the erstwhile freedom you gain in doing it, you would be far better off than burning precious minutes of your day retorting to the occasional idiocy that rears it's head on a regular basis here.



    The actual active jailbreaking community (as opposed to those many who are simply utilitarian incidental breakers) is a tiny fraction of the iOS user base. Surely you realize that. And don't bother to go on about "well all the people <I> know have jailbroken phones" or "there are millions of jailbroken phone on T-Mobile". Those numbers, while impressive and significant to you are not impressive and significant in the market at large - no matter how much you wish it to be so. And its OK.



    Everyone keep your toys in your sandboxes and stop throw sand at each other. Apple uses input and feedback from a wide range of sources (including jailbreaking sites and blogs, for example) to review their security and feature strategy, among others. There is a reason why Apple is Apple and well you , are you. When you can stand your company up toe-to-toe with Apple and deliver as many products across the range of users they have to support, you then have bragging rights. Until then everyone is entitled to an opinion. And all opinions are NOT created equal.



    Peace.
     0Likes 0Dislikes 0Informatives
Sign In or Register to comment.